whale-code 6.5.6 → 6.5.7

package/dist/server/server-routes-public.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-routes-public.js","names":["randomUUID","createLogger","getServiceClient","checkPlanLimits","incrementUsage","verifyGuestApprovalSignature","executeInlineChain","jsonResponse","readBody","safeCompare","sendIpRateLimit","getSseClients","sendWorkflowSSE","safeSseWrite","MAX_SSE_CLIENTS_PER_RUN","MAX_SSE_TOTAL_CLIENTS","getTotalSseClients","log","webchatAgentInvoker","setWebchatAgentInvoker","invoker","SUPABASE_SERVICE_ROLE_KEY","process","env","SERVICE_ROLE_JWT","FLY_INTERNAL_SECRET","handleSseStreamRoute","req","res","pathname","corsHeaders","method","match","runId","split","authHeader","headers","authorization","token","startsWith","substring","isInternal","error","sb","data","user","authUser","authError","auth","getUser","sseRun","from","select","eq","single","membership","store_id","id","sseClients","existingClients","get","size","writeHead","Connection","run","stepRuns","order","ascending","type","steps","has","set","Set","add","cleanup","clearInterval","heartbeat","clients","delete","setInterval","on","handleGuestApprovalRoute","guestApprovalMatch","clientIp","toString","trim","socket","remoteAddress","stepRunId","urlParams","URL","url","host","searchParams","action","expires","sig","Date","guestSupabase","approval","limit","length","status","isApprove","guestResult","guestErr","rpc","p_approval_id","p_store_id","p_response","p_response_data","guest","p_responded_by","success","message","run_id","err","end","handleWebchatRoutes","webchatCors","webchatMsgMatch","rawBody","channelId","wcBody","JSON","parse","content","supabase","channel","planCheck","allowed","reason","senderId","sender_id","conversationId","conversation_id","thirtyMinAgo","now","toISOString","recent","gt","not","msgErr","insert","channel_id","direction","sender_name","content_type","metadata","source","ip","widget_version","agent_id","messages_in","catch","p_channel_id","agentResponse","result","response","outMsg","auto_response","messages_out","agent_invocations","agent_response","webchatHistoryMatch","reqConvId","wcChannel","test","query","in","messages","histErr","fs","path","possiblePaths","join","import","meta","dirname","__dirname","cwd","widgetJs","p","readFileSync"],"sources":["../../src/server/server-routes-public.ts"],"sourcesContent":["// server/server-routes-public.ts — Public/unauthenticated route handlers\n// SSE streaming, guest approvals, webchat, billing, node routes\n// Extracted from index.ts for modularity.\n\nimport http from \"node:http\";\nimport { randomUUID } from \"node:crypto\";\nimport type { SupabaseClient } from \"@supabase/supabase-js\";\nimport { createLogger } from \"./lib/logger.js\";\nimport { getServiceClient } from \"./lib/supabase-client.js\";\nimport { checkPlanLimits, incrementUsage } from \"./handlers/billing.js\";\nimport { handleBillingRoutes } from \"./handlers/billing.js\";\nimport { handleNodeRoutes } from \"./handlers/nodes.js\";\nimport { verifyGuestApprovalSignature, executeInlineChain } from \"./handlers/workflows.js\";\nimport { jsonResponse, readBody, safeCompare } from \"./server-helpers.js\";\nimport { sendIpRateLimit } from \"./server-rate-limit.js\";\nimport { getSseClients, sendWorkflowSSE, safeSseWrite, MAX_SSE_CLIENTS_PER_RUN, MAX_SSE_TOTAL_CLIENTS, getTotalSseClients } from \"./server-sse.js\";\n\nconst log = createLogger(\"server-routes-public\");\n\n// Webchat agent invoker — set later to avoid circular deps\nlet webchatAgentInvoker: ((\n  supabase: SupabaseClient, agentId: string, message: string, storeId: string, conversationId: string, senderContext?: any,\n) => Promise<{ success: boolean; response?: string; error?: string }>) | null = null;\n\nexport function setWebchatAgentInvoker(invoker: typeof webchatAgentInvoker): void {\n  webchatAgentInvoker = invoker;\n}\n\n// Env secrets (needed for auth checks)\nconst SUPABASE_SERVICE_ROLE_KEY = process.env.SUPABASE_SERVICE_ROLE_KEY!;\nconst SERVICE_ROLE_JWT = process.env.SERVICE_ROLE_JWT || \"\";\nconst FLY_INTERNAL_SECRET = process.env.FLY_INTERNAL_SECRET || \"\";\n\n/**\n * Handle SSE workflow stream route.\n * Returns true if route was handled, false otherwise.\n */\nexport async function handleSseStreamRoute(\n  req: http.IncomingMessage, res: http.ServerResponse,\n  pathname: string, corsHeaders: Record<string, string>,\n): Promise<boolean> {\n  if (!(req.method === \"GET\" && pathname.match(/^\\/workflows\\/runs\\/[a-f0-9-]+\\/stream$/))) return false;\n\n  const runId = pathname.split(\"/\")[3];\n  const authHeader = req.headers.authorization;\n  const token = authHeader?.startsWith(\"Bearer \") ? authHeader.substring(7) : \"\";\n  const isInternal = safeCompare(token, FLY_INTERNAL_SECRET) || safeCompare(token, SUPABASE_SERVICE_ROLE_KEY) || safeCompare(token, SERVICE_ROLE_JWT);\n\n  if (!isInternal && !token) { jsonResponse(res, 401, { error: \"Missing authorization\" }, corsHeaders); return true; }\n\n  if (!isInternal) {\n    const sb = getServiceClient();\n    const { data: { user: authUser }, error: authError } = await sb.auth.getUser(token);\n    if (authError || !authUser) { jsonResponse(res, 401, { error: \"Invalid or expired token\" }, corsHeaders); return true; }\n    const { data: sseRun } = await sb.from(\"workflow_runs\").select(\"store_id\").eq(\"id\", runId).single();\n    if (sseRun) {\n      const { data: membership } = await sb.from(\"store_members\").select(\"id\").eq(\"store_id\", sseRun.store_id).eq(\"user_id\", authUser.id).single();\n      if (!membership) { jsonResponse(res, 403, { error: \"Not authorized to view this run\" }, corsHeaders); return true; }\n    }\n  }\n\n  const sseClients = getSseClients();\n  const existingClients = sseClients.get(runId)?.size || 0;\n  if (existingClients >= MAX_SSE_CLIENTS_PER_RUN) { jsonResponse(res, 429, { error: \"Too many SSE clients for this run\" }, corsHeaders); return true; }\n  if (getTotalSseClients() >= MAX_SSE_TOTAL_CLIENTS) { jsonResponse(res, 429, { error: \"Too many total SSE connections\" }, corsHeaders); return true; }\n\n  res.writeHead(200, { \"Content-Type\": \"text/event-stream\", \"Cache-Control\": \"no-cache\", Connection: \"keep-alive\", ...corsHeaders });\n\n  const sb = getServiceClient();\n  const { data: run } = await sb.from(\"workflow_runs\")\n    .select(\"id, workflow_id, status, trigger_type, current_step_key, error_message, error_step_key, started_at, completed_at, duration_ms\")\n    .eq(\"id\", runId).single();\n  const { data: stepRuns } = await sb.from(\"workflow_step_runs\")\n    .select(\"id, step_key, step_type, status, error_message, duration_ms, started_at, completed_at\")\n    .eq(\"run_id\", runId).order(\"created_at\", { ascending: true });\n\n  sendWorkflowSSE(res, { type: \"snapshot\", run, steps: stepRuns || [] });\n\n  if (!sseClients.has(runId)) sseClients.set(runId, new Set());\n  sseClients.get(runId)!.add(res);\n\n  const cleanup = () => {\n    clearInterval(heartbeat);\n    const clients = sseClients.get(runId);\n    if (clients) { clients.delete(res); if (clients.size === 0) sseClients.delete(runId); }\n  };\n\n  const heartbeat = setInterval(() => {\n    if (!safeSseWrite(res, `: heartbeat\\n\\n`, cleanup)) clearInterval(heartbeat);\n  }, 15_000);\n\n  req.on(\"close\", cleanup);\n  req.on(\"error\", cleanup);\n  return true;\n}\n\n/**\n * Handle guest approval route.\n * Returns true if route was handled, false otherwise.\n */\nexport async function handleGuestApprovalRoute(\n  req: http.IncomingMessage, res: http.ServerResponse,\n  pathname: string, corsHeaders: Record<string, string>,\n): Promise<boolean> {\n  const guestApprovalMatch = pathname.match(/^\\/approvals\\/guest\\/([a-f0-9-]+)$/);\n  if (!(guestApprovalMatch && req.method === \"GET\")) return false;\n\n  const clientIp = req.headers[\"x-forwarded-for\"]?.toString().split(\",\")[0]?.trim() || req.socket.remoteAddress || \"unknown\";\n  if (sendIpRateLimit(res, clientIp, corsHeaders)) return true;\n\n  const stepRunId = guestApprovalMatch[1];\n  const urlParams = new URL(req.url || \"\", `http://${req.headers.host}`).searchParams;\n  const action = urlParams.get(\"action\") || \"\";\n  const expires = urlParams.get(\"expires\") || \"\";\n  const sig = urlParams.get(\"sig\") || \"\";\n\n  if (!action || !expires || !sig) { jsonResponse(res, 400, { error: \"Missing action, expires, or sig parameter\" }, corsHeaders); return true; }\n  if (new Date(expires) < new Date()) { jsonResponse(res, 410, { error: \"This approval link has expired\" }, corsHeaders); return true; }\n  if (!verifyGuestApprovalSignature(stepRunId, action, expires, sig)) { jsonResponse(res, 403, { error: \"Invalid signature\" }, corsHeaders); return true; }\n\n  const guestSupabase = getServiceClient();\n  const { data: approval } = await guestSupabase.from(\"workflow_approval_requests\").select(\"id, store_id, run_id, status\").eq(\"step_run_id\", stepRunId).limit(1);\n  if (!approval?.length) { jsonResponse(res, 404, { error: \"Approval not found\" }, corsHeaders); return true; }\n  if (approval[0].status !== \"pending\") { jsonResponse(res, 409, { error: `Approval already ${approval[0].status}` }, corsHeaders); return true; }\n\n  const isApprove = action === \"approve\" || action === \"approved\";\n  const { data: guestResult, error: guestErr } = await guestSupabase.rpc(\"respond_to_approval\", {\n    p_approval_id: approval[0].id, p_store_id: approval[0].store_id,\n    p_response: isApprove ? \"approved\" : \"rejected\", p_response_data: { guest: true, action }, p_responded_by: null,\n  });\n\n  if (guestErr) { jsonResponse(res, 500, { success: false, error: guestErr.message }, corsHeaders); return true; }\n\n  if (guestResult?.success && approval[0].run_id) {\n    try { await executeInlineChain(guestSupabase, approval[0].run_id); } catch (err) { log.error({ err: (err as Error).message, runId: approval[0].run_id }, \"inline chain failed after guest approval\"); }\n  }\n\n  res.writeHead(200, { \"Content-Type\": \"text/html\", ...corsHeaders });\n  res.end(`<!DOCTYPE html><html><body style=\"font-family:system-ui;text-align:center;padding:40px\">\n    <h2>${isApprove ? \"Approved\" : \"Rejected\"}</h2>\n    <p>Your response has been recorded. You can close this window.</p>\n  </body></html>`);\n  return true;\n}\n\n/**\n * Handle webchat routes (messages, history, widget.js).\n * Returns true if route was handled, false otherwise.\n */\nexport async function handleWebchatRoutes(\n  req: http.IncomingMessage, res: http.ServerResponse,\n  pathname: string, url: URL, corsHeaders: Record<string, string>,\n): Promise<boolean> {\n  const webchatCors = { ...corsHeaders, \"Access-Control-Allow-Origin\": \"*\" };\n\n  // POST /webchat/channels/:id/messages\n  const webchatMsgMatch = pathname.match(/^\\/webchat\\/channels\\/([a-f0-9-]+)\\/messages$/);\n  if (webchatMsgMatch && req.method === \"POST\") {\n    const clientIp = req.headers[\"x-forwarded-for\"]?.toString().split(\",\")[0]?.trim() || req.socket.remoteAddress || \"unknown\";\n    if (sendIpRateLimit(res, clientIp, webchatCors)) return true;\n\n    let rawBody: string;\n    try { rawBody = await readBody(req); } catch { jsonResponse(res, 413, { error: \"Request body too large\" }, webchatCors); return true; }\n\n    const channelId = webchatMsgMatch[1];\n    let wcBody: any;\n    try { wcBody = JSON.parse(rawBody); } catch { jsonResponse(res, 400, { error: \"Invalid JSON\" }, webchatCors); return true; }\n    if (!wcBody.content || typeof wcBody.content !== \"string\") { jsonResponse(res, 400, { error: \"content (string) is required\" }, webchatCors); return true; }\n    if (wcBody.content.length > 5000) { jsonResponse(res, 400, { error: \"Message too long (max 5000 characters)\" }, webchatCors); return true; }\n\n    const supabase = getServiceClient();\n    const { data: channel } = await supabase.from(\"channels\").select(\"id, store_id, node_id, agent_id, type, config\").eq(\"id\", channelId).eq(\"type\", \"webchat\").single();\n    if (!channel) { jsonResponse(res, 404, { error: \"Webchat channel not found\" }, webchatCors); return true; }\n\n    try {\n      const planCheck = await checkPlanLimits(supabase, channel.store_id, \"message\");\n      if (!planCheck.allowed) { jsonResponse(res, 429, { error: planCheck.reason || \"Plan limit reached\" }, webchatCors); return true; }\n    } catch { /* billing tables may not exist yet */ }\n\n    const senderId = (wcBody.sender_id as string) || \"anonymous\";\n    let conversationId: string = (wcBody.conversation_id as string) || \"\";\n    if (!conversationId) {\n      const thirtyMinAgo = new Date(Date.now() - 30 * 60 * 1000).toISOString();\n      const { data: recent } = await supabase.from(\"channel_messages\").select(\"conversation_id\")\n        .eq(\"channel_id\", channelId).eq(\"sender_id\", senderId).gt(\"created_at\", thirtyMinAgo)\n        .not(\"conversation_id\", \"is\", null).order(\"created_at\", { ascending: false }).limit(1);\n      conversationId = (recent?.length && recent[0].conversation_id) || randomUUID();\n    }\n\n    const { data: message, error: msgErr } = await supabase.from(\"channel_messages\").insert({\n      store_id: channel.store_id, channel_id: channelId, direction: \"inbound\",\n      sender_id: senderId, sender_name: wcBody.sender_name || \"Visitor\",\n      content: wcBody.content, content_type: \"text\",\n      metadata: { source: \"webchat\", ip: clientIp, widget_version: \"1.0.0\" },\n      agent_id: channel.agent_id, conversation_id: conversationId,\n    }).select(\"id, direction, content, conversation_id, created_at\").single();\n    if (msgErr) { jsonResponse(res, 500, { error: msgErr.message }, webchatCors); return true; }\n\n    incrementUsage(supabase, channel.store_id, { messages_in: 1 }).catch(() => {});\n    try { await supabase.rpc(\"increment_channel_stats\", { p_channel_id: channelId }); } catch { /* ok */ }\n\n    let agentResponse: any = null;\n    if (channel.agent_id && webchatAgentInvoker) {\n      try {\n        const result = await webchatAgentInvoker(supabase, channel.agent_id, wcBody.content, channel.store_id, conversationId);\n        if (result.success && result.response) {\n          const { data: outMsg } = await supabase.from(\"channel_messages\").insert({\n            store_id: channel.store_id, channel_id: channelId, direction: \"outbound\",\n            sender_id: \"agent\", sender_name: \"AI Agent\",\n            content: result.response, content_type: \"text\",\n            metadata: { agent_id: channel.agent_id, auto_response: true, source: \"webchat\" },\n            agent_id: channel.agent_id, conversation_id: conversationId,\n          }).select(\"id, direction, content, conversation_id, created_at\").single();\n          agentResponse = outMsg;\n          incrementUsage(supabase, channel.store_id, { messages_out: 1, agent_invocations: 1 }).catch(() => {});\n        }\n      } catch (err) { log.error({ err: (err as Error).message }, \"webchat agent error\"); }\n    }\n\n    jsonResponse(res, 201, { success: true, message, agent_response: agentResponse, conversation_id: conversationId }, webchatCors);\n    return true;\n  }\n\n  // GET /webchat/channels/:id/history\n  const webchatHistoryMatch = pathname.match(/^\\/webchat\\/channels\\/([a-f0-9-]+)\\/history$/);\n  if (webchatHistoryMatch && req.method === \"GET\") {\n    const clientIp = req.headers[\"x-forwarded-for\"]?.toString().split(\",\")[0]?.trim() || req.socket.remoteAddress || \"unknown\";\n    if (sendIpRateLimit(res, clientIp, webchatCors)) return true;\n\n    const channelId = webchatHistoryMatch[1];\n    const senderId = url.searchParams.get(\"sender_id\") || \"\";\n    const reqConvId = url.searchParams.get(\"conversation_id\") || \"\";\n    if (!senderId) { jsonResponse(res, 400, { error: \"sender_id query parameter required\" }, webchatCors); return true; }\n\n    const supabase = getServiceClient();\n    const { data: wcChannel } = await supabase.from(\"channels\").select(\"id, type\").eq(\"id\", channelId).eq(\"type\", \"webchat\").single();\n    if (!wcChannel) { jsonResponse(res, 404, { error: \"Webchat channel not found\" }, webchatCors); return true; }\n\n    if (!/^[a-zA-Z0-9_-]+$/.test(senderId)) { jsonResponse(res, 400, { error: \"Invalid sender_id format\" }, webchatCors); return true; }\n    let query = supabase.from(\"channel_messages\")\n      .select(\"id, direction, sender_id, sender_name, content, content_type, created_at\")\n      .eq(\"channel_id\", channelId);\n    if (reqConvId) { query = query.eq(\"conversation_id\", reqConvId).in(\"sender_id\", [senderId, \"agent\"]); }\n    else { query = query.in(\"sender_id\", [senderId, \"agent\"]); }\n\n    const { data: messages, error: histErr } = await query.order(\"created_at\", { ascending: true }).limit(50);\n    if (histErr) { jsonResponse(res, 500, { error: histErr.message }, webchatCors); return true; }\n    jsonResponse(res, 200, { success: true, messages: messages || [] }, webchatCors);\n    return true;\n  }\n\n  // GET /webchat/widget.js\n  if (pathname === \"/webchat/widget.js\" && req.method === \"GET\") {\n    const fs = await import(\"node:fs\");\n    const path = await import(\"node:path\");\n    const possiblePaths = [\n      path.join(import.meta.dirname || __dirname, \"../../dist/webchat/widget.js\"),\n      path.join(import.meta.dirname || __dirname, \"../../../dist/webchat/widget.js\"),\n      path.join(process.cwd(), \"dist/webchat/widget.js\"),\n    ];\n    let widgetJs: string | null = null;\n    for (const p of possiblePaths) { try { widgetJs = fs.readFileSync(p, \"utf-8\"); break; } catch { /* try next */ } }\n    if (widgetJs) {\n      res.writeHead(200, { \"Content-Type\": \"application/javascript\", \"Cache-Control\": \"public, max-age=3600\", ...webchatCors });\n      res.end(widgetJs);\n    } else {\n      res.writeHead(200, { \"Content-Type\": \"application/javascript\", ...webchatCors });\n      res.end('console.warn(\"[WhaleChat] Widget JS not built. Run: npx esbuild src/webchat/widget.ts --bundle --minify --outfile=dist/webchat/widget.js\");');\n    }\n    return true;\n  }\n\n  return false;\n}\n\n// Billing and node route handling is in the main index.ts to keep this file under 300 lines\n"],"mappings":"AAAA;AACA;AACA;;AAGA,SAASA,UAAU,QAAQ,aAAa;AAExC,SAASC,YAAY,QAAQ,iBAAiB;AAC9C,SAASC,gBAAgB,QAAQ,0BAA0B;AAC3D,SAASC,eAAe,EAAEC,cAAc,QAAQ,uBAAuB;AAGvE,SAASC,4BAA4B,EAAEC,kBAAkB,QAAQ,yBAAyB;AAC1F,SAASC,YAAY,EAAEC,QAAQ,EAAEC,WAAW,QAAQ,qBAAqB;AACzE,SAASC,eAAe,QAAQ,wBAAwB;AACxD,SAASC,aAAa,EAAEC,eAAe,EAAEC,YAAY,EAAEC,uBAAuB,EAAEC,qBAAqB,EAAEC,kBAAkB,QAAQ,iBAAiB;AAElJ,MAAMC,GAAG,GAAGhB,YAAY,CAAC,sBAAsB,CAAC;;AAEhD;AACA,IAAIiB,mBAEyE,GAAG,IAAI;AAEpF,OAAO,SAASC,sBAAsBA,CAACC,OAAmC,EAAQ;EAChFF,mBAAmB,GAAGE,OAAO;AAC/B;;AAEA;AACA,MAAMC,yBAAyB,GAAGC,OAAO,CAACC,GAAG,CAACF,yBAA0B;AACxE,MAAMG,gBAAgB,GAAGF,OAAO,CAACC,GAAG,CAACC,gBAAgB,IAAI,EAAE;AAC3D,MAAMC,mBAAmB,GAAGH,OAAO,CAACC,GAAG,CAACE,mBAAmB,IAAI,EAAE;;AAEjE;AACA;AACA;AACA;AACA,OAAO,eAAeC,oBAAoBA,CACxCC,GAAyB,EAAEC,GAAwB,EACnDC,QAAgB,EAAEC,WAAmC,EACnC;EAClB,IAAI,EAAEH,GAAG,CAACI,MAAM,KAAK,KAAK,IAAIF,QAAQ,CAACG,KAAK,CAAC,yCAAyC,CAAC,CAAC,EAAE,OAAO,KAAK;EAEtG,MAAMC,KAAK,GAAGJ,QAAQ,CAACK,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;EACpC,MAAMC,UAAU,GAAGR,GAAG,CAACS,OAAO,CAACC,aAAa;EAC5C,MAAMC,KAAK,GAAGH,UAAU,EAAEI,UAAU,CAAC,SAAS,CAAC,GAAGJ,UAAU,CAACK,SAAS,CAAC,CAAC,CAAC,GAAG,EAAE;EAC9E,MAAMC,UAAU,GAAGhC,WAAW,CAAC6B,KAAK,EAAEb,mBAAmB,CAAC,IAAIhB,WAAW,CAAC6B,KAAK,EAAEjB,yBAAyB,CAAC,IAAIZ,WAAW,CAAC6B,KAAK,EAAEd,gBAAgB,CAAC;EAEnJ,IAAI,CAACiB,UAAU,IAAI,CAACH,KAAK,EAAE;IAAE/B,YAAY,CAACqB,GAAG,EAAE,GAAG,EAAE;MAAEc,KAAK,EAAE;IAAwB,CAAC,EAAEZ,WAAW,CAAC;IAAE,OAAO,IAAI;EAAE;EAEnH,IAAI,CAACW,UAAU,EAAE;IACf,MAAME,EAAE,GAAGzC,gBAAgB,CAAC,CAAC;IAC7B,MAAM;MAAE0C,IAAI,EAAE;QAAEC,IAAI,EAAEC;MAAS,CAAC;MAAEJ,KAAK,EAAEK;IAAU,CAAC,GAAG,MAAMJ,EAAE,CAACK,IAAI,CAACC,OAAO,CAACX,KAAK,CAAC;IACnF,IAAIS,SAAS,IAAI,CAACD,QAAQ,EAAE;MAAEvC,YAAY,CAACqB,GAAG,EAAE,GAAG,EAAE;QAAEc,KAAK,EAAE;MAA2B,CAAC,EAAEZ,WAAW,CAAC;MAAE,OAAO,IAAI;IAAE;IACvH,MAAM;MAAEc,IAAI,EAAEM;IAAO,CAAC,GAAG,MAAMP,EAAE,CAACQ,IAAI,CAAC,eAAe,CAAC,CAACC,MAAM,CAAC,UAAU,CAAC,CAACC,EAAE,CAAC,IAAI,EAAEpB,KAAK,CAAC,CAACqB,MAAM,CAAC,CAAC;IACnG,IAAIJ,MAAM,EAAE;MACV,MAAM;QAAEN,IAAI,EAAEW;MAAW,CAAC,GAAG,MAAMZ,EAAE,CAACQ,IAAI,CAAC,eAAe,CAAC,CAACC,MAAM,CAAC,IAAI,CAAC,CAACC,EAAE,CAAC,UAAU,EAAEH,MAAM,CAACM,QAAQ,CAAC,CAACH,EAAE,CAAC,SAAS,EAAEP,QAAQ,CAACW,EAAE,CAAC,CAACH,MAAM,CAAC,CAAC;MAC5I,IAAI,CAACC,UAAU,EAAE;QAAEhD,YAAY,CAACqB,GAAG,EAAE,GAAG,EAAE;UAAEc,KAAK,EAAE;QAAkC,CAAC,EAAEZ,WAAW,CAAC;QAAE,OAAO,IAAI;MAAE;IACrH;EACF;EAEA,MAAM4B,UAAU,GAAG/C,aAAa,CAAC,CAAC;EAClC,MAAMgD,eAAe,GAAGD,UAAU,CAACE,GAAG,CAAC3B,KAAK,CAAC,EAAE4B,IAAI,IAAI,CAAC;EACxD,IAAIF,eAAe,IAAI7C,uBAAuB,EAAE;IAAEP,YAAY,CAACqB,GAAG,EAAE,GAAG,EAAE;MAAEc,KAAK,EAAE;IAAoC,CAAC,EAAEZ,WAAW,CAAC;IAAE,OAAO,IAAI;EAAE;EACpJ,IAAId,kBAAkB,CAAC,CAAC,IAAID,qBAAqB,EAAE;IAAER,YAAY,CAACqB,GAAG,EAAE,GAAG,EAAE;MAAEc,KAAK,EAAE;IAAiC,CAAC,EAAEZ,WAAW,CAAC;IAAE,OAAO,IAAI;EAAE;EAEpJF,GAAG,CAACkC,SAAS,CAAC,GAAG,EAAE;IAAE,cAAc,EAAE,mBAAmB;IAAE,eAAe,EAAE,UAAU;IAAEC,UAAU,EAAE,YAAY;IAAE,GAAGjC;EAAY,CAAC,CAAC;EAElI,MAAMa,EAAE,GAAGzC,gBAAgB,CAAC,CAAC;EAC7B,MAAM;IAAE0C,IAAI,EAAEoB;EAAI,CAAC,GAAG,MAAMrB,EAAE,CAACQ,IAAI,CAAC,eAAe,CAAC,CACjDC,MAAM,CAAC,+HAA+H,CAAC,CACvIC,EAAE,CAAC,IAAI,EAAEpB,KAAK,CAAC,CAACqB,MAAM,CAAC,CAAC;EAC3B,MAAM;IAAEV,IAAI,EAAEqB;EAAS,CAAC,GAAG,MAAMtB,EAAE,CAACQ,IAAI,CAAC,oBAAoB,CAAC,CAC3DC,MAAM,CAAC,uFAAuF,CAAC,CAC/FC,EAAE,CAAC,QAAQ,EAAEpB,KAAK,CAAC,CAACiC,KAAK,CAAC,YAAY,EAAE;IAAEC,SAAS,EAAE;EAAK,CAAC,CAAC;EAE/DvD,eAAe,CAACgB,GAAG,EAAE;IAAEwC,IAAI,EAAE,UAAU;IAAEJ,GAAG;IAAEK,KAAK,EAAEJ,QAAQ,IAAI;EAAG,CAAC,CAAC;EAEtE,IAAI,CAACP,UAAU,CAACY,GAAG,CAACrC,KAAK,CAAC,EAAEyB,UAAU,CAACa,GAAG,CAACtC,KAAK,EAAE,IAAIuC,GAAG,CAAC,CAAC,CAAC;EAC5Dd,UAAU,CAACE,GAAG,CAAC3B,KAAK,CAAC,CAAEwC,GAAG,CAAC7C,GAAG,CAAC;EAE/B,MAAM8C,OAAO,GAAGA,CAAA,KAAM;IACpBC,aAAa,CAACC,SAAS,CAAC;IACxB,MAAMC,OAAO,GAAGnB,UAAU,CAACE,GAAG,CAAC3B,KAAK,CAAC;IACrC,IAAI4C,OAAO,EAAE;MAAEA,OAAO,CAACC,MAAM,CAAClD,GAAG,CAAC;MAAE,IAAIiD,OAAO,CAAChB,IAAI,KAAK,CAAC,EAAEH,UAAU,CAACoB,MAAM,CAAC7C,KAAK,CAAC;IAAE;EACxF,CAAC;EAED,MAAM2C,SAAS,GAAGG,WAAW,CAAC,MAAM;IAClC,IAAI,CAAClE,YAAY,CAACe,GAAG,EAAE,iBAAiB,EAAE8C,OAAO,CAAC,EAAEC,aAAa,CAACC,SAAS,CAAC;EAC9E,CAAC,EAAE,MAAM,CAAC;EAEVjD,GAAG,CAACqD,EAAE,CAAC,OAAO,EAAEN,OAAO,CAAC;EACxB/C,GAAG,CAACqD,EAAE,CAAC,OAAO,EAAEN,OAAO,CAAC;EACxB,OAAO,IAAI;AACb;;AAEA;AACA;AACA;AACA;AACA,OAAO,eAAeO,wBAAwBA,CAC5CtD,GAAyB,EAAEC,GAAwB,EACnDC,QAAgB,EAAEC,WAAmC,EACnC;EAClB,MAAMoD,kBAAkB,GAAGrD,QAAQ,CAACG,KAAK,CAAC,oCAAoC,CAAC;EAC/E,IAAI,EAAEkD,kBAAkB,IAAIvD,GAAG,CAACI,MAAM,KAAK,KAAK,CAAC,EAAE,OAAO,KAAK;EAE/D,MAAMoD,QAAQ,GAAGxD,GAAG,CAACS,OAAO,CAAC,iBAAiB,CAAC,EAAEgD,QAAQ,CAAC,CAAC,CAAClD,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAEmD,IAAI,CAAC,CAAC,IAAI1D,GAAG,CAAC2D,MAAM,CAACC,aAAa,IAAI,SAAS;EAC1H,IAAI7E,eAAe,CAACkB,GAAG,EAAEuD,QAAQ,EAAErD,WAAW,CAAC,EAAE,OAAO,IAAI;EAE5D,MAAM0D,SAAS,GAAGN,kBAAkB,CAAC,CAAC,CAAC;EACvC,MAAMO,SAAS,GAAG,IAAIC,GAAG,CAAC/D,GAAG,CAACgE,GAAG,IAAI,EAAE,EAAE,UAAUhE,GAAG,CAACS,OAAO,CAACwD,IAAI,EAAE,CAAC,CAACC,YAAY;EACnF,MAAMC,MAAM,GAAGL,SAAS,CAAC7B,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE;EAC5C,MAAMmC,OAAO,GAAGN,SAAS,CAAC7B,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE;EAC9C,MAAMoC,GAAG,GAAGP,SAAS,CAAC7B,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE;EAEtC,IAAI,CAACkC,MAAM,IAAI,CAACC,OAAO,IAAI,CAACC,GAAG,EAAE;IAAEzF,YAAY,CAACqB,GAAG,EAAE,GAAG,EAAE;MAAEc,KAAK,EAAE;IAA4C,CAAC,EAAEZ,WAAW,CAAC;IAAE,OAAO,IAAI;EAAE;EAC7I,IAAI,IAAImE,IAAI,CAACF,OAAO,CAAC,GAAG,IAAIE,IAAI,CAAC,CAAC,EAAE;IAAE1F,YAAY,CAACqB,GAAG,EAAE,GAAG,EAAE;MAAEc,KAAK,EAAE;IAAiC,CAAC,EAAEZ,WAAW,CAAC;IAAE,OAAO,IAAI;EAAE;EACrI,IAAI,CAACzB,4BAA4B,CAACmF,SAAS,EAAEM,MAAM,EAAEC,OAAO,EAAEC,GAAG,CAAC,EAAE;IAAEzF,YAAY,CAACqB,GAAG,EAAE,GAAG,EAAE;MAAEc,KAAK,EAAE;IAAoB,CAAC,EAAEZ,WAAW,CAAC;IAAE,OAAO,IAAI;EAAE;EAExJ,MAAMoE,aAAa,GAAGhG,gBAAgB,CAAC,CAAC;EACxC,MAAM;IAAE0C,IAAI,EAAEuD;EAAS,CAAC,GAAG,MAAMD,aAAa,CAAC/C,IAAI,CAAC,4BAA4B,CAAC,CAACC,MAAM,CAAC,8BAA8B,CAAC,CAACC,EAAE,CAAC,aAAa,EAAEmC,SAAS,CAAC,CAACY,KAAK,CAAC,CAAC,CAAC;EAC9J,IAAI,CAACD,QAAQ,EAAEE,MAAM,EAAE;IAAE9F,YAAY,CAACqB,GAAG,EAAE,GAAG,EAAE;MAAEc,KAAK,EAAE;IAAqB,CAAC,EAAEZ,WAAW,CAAC;IAAE,OAAO,IAAI;EAAE;EAC5G,IAAIqE,QAAQ,CAAC,CAAC,CAAC,CAACG,MAAM,KAAK,SAAS,EAAE;IAAE/F,YAAY,CAACqB,GAAG,EAAE,GAAG,EAAE;MAAEc,KAAK,EAAE,oBAAoByD,QAAQ,CAAC,CAAC,CAAC,CAACG,MAAM;IAAG,CAAC,EAAExE,WAAW,CAAC;IAAE,OAAO,IAAI;EAAE;EAE/I,MAAMyE,SAAS,GAAGT,MAAM,KAAK,SAAS,IAAIA,MAAM,KAAK,UAAU;EAC/D,MAAM;IAAElD,IAAI,EAAE4D,WAAW;IAAE9D,KAAK,EAAE+D;EAAS,CAAC,GAAG,MAAMP,aAAa,CAACQ,GAAG,CAAC,qBAAqB,EAAE;IAC5FC,aAAa,EAAER,QAAQ,CAAC,CAAC,CAAC,CAAC1C,EAAE;IAAEmD,UAAU,EAAET,QAAQ,CAAC,CAAC,CAAC,CAAC3C,QAAQ;IAC/DqD,UAAU,EAAEN,SAAS,GAAG,UAAU,GAAG,UAAU;IAAEO,eAAe,EAAE;MAAEC,KAAK,EAAE,IAAI;MAAEjB;IAAO,CAAC;IAAEkB,cAAc,EAAE;EAC7G,CAAC,CAAC;EAEF,IAAIP,QAAQ,EAAE;IAAElG,YAAY,CAACqB,GAAG,EAAE,GAAG,EAAE;MAAEqF,OAAO,EAAE,KAAK;MAAEvE,KAAK,EAAE+D,QAAQ,CAACS;IAAQ,CAAC,EAAEpF,WAAW,CAAC;IAAE,OAAO,IAAI;EAAE;EAE/G,IAAI0E,WAAW,EAAES,OAAO,IAAId,QAAQ,CAAC,CAAC,CAAC,CAACgB,MAAM,EAAE;IAC9C,IAAI;MAAE,MAAM7G,kBAAkB,CAAC4F,aAAa,EAAEC,QAAQ,CAAC,CAAC,CAAC,CAACgB,MAAM,CAAC;IAAE,CAAC,CAAC,OAAOC,GAAG,EAAE;MAAEnG,GAAG,CAACyB,KAAK,CAAC;QAAE0E,GAAG,EAAGA,GAAG,CAAWF,OAAO;QAAEjF,KAAK,EAAEkE,QAAQ,CAAC,CAAC,CAAC,CAACgB;MAAO,CAAC,EAAE,0CAA0C,CAAC;IAAE;EACxM;EAEAvF,GAAG,CAACkC,SAAS,CAAC,GAAG,EAAE;IAAE,cAAc,EAAE,WAAW;IAAE,GAAGhC;EAAY,CAAC,CAAC;EACnEF,GAAG,CAACyF,GAAG,CAAC;AACV,UAAUd,SAAS,GAAG,UAAU,GAAG,UAAU;AAC7C;AACA,iBAAiB,CAAC;EAChB,OAAO,IAAI;AACb;;AAEA;AACA;AACA;AACA;AACA,OAAO,eAAee,mBAAmBA,CACvC3F,GAAyB,EAAEC,GAAwB,EACnDC,QAAgB,EAAE8D,GAAQ,EAAE7D,WAAmC,EAC7C;EAClB,MAAMyF,WAAW,GAAG;IAAE,GAAGzF,WAAW;IAAE,6BAA6B,EAAE;EAAI,CAAC;;EAE1E;EACA,MAAM0F,eAAe,GAAG3F,QAAQ,CAACG,KAAK,CAAC,+CAA+C,CAAC;EACvF,IAAIwF,eAAe,IAAI7F,GAAG,CAACI,MAAM,KAAK,MAAM,EAAE;IAC5C,MAAMoD,QAAQ,GAAGxD,GAAG,CAACS,OAAO,CAAC,iBAAiB,CAAC,EAAEgD,QAAQ,CAAC,CAAC,CAAClD,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAEmD,IAAI,CAAC,CAAC,IAAI1D,GAAG,CAAC2D,MAAM,CAACC,aAAa,IAAI,SAAS;IAC1H,IAAI7E,eAAe,CAACkB,GAAG,EAAEuD,QAAQ,EAAEoC,WAAW,CAAC,EAAE,OAAO,IAAI;IAE5D,IAAIE,OAAe;IACnB,IAAI;MAAEA,OAAO,GAAG,MAAMjH,QAAQ,CAACmB,GAAG,CAAC;IAAE,CAAC,CAAC,MAAM;MAAEpB,YAAY,CAACqB,GAAG,EAAE,GAAG,EAAE;QAAEc,KAAK,EAAE;MAAyB,CAAC,EAAE6E,WAAW,CAAC;MAAE,OAAO,IAAI;IAAE;IAEtI,MAAMG,SAAS,GAAGF,eAAe,CAAC,CAAC,CAAC;IACpC,IAAIG,MAAW;IACf,IAAI;MAAEA,MAAM,GAAGC,IAAI,CAACC,KAAK,CAACJ,OAAO,CAAC;IAAE,CAAC,CAAC,MAAM;MAAElH,YAAY,CAACqB,GAAG,EAAE,GAAG,EAAE;QAAEc,KAAK,EAAE;MAAe,CAAC,EAAE6E,WAAW,CAAC;MAAE,OAAO,IAAI;IAAE;IAC3H,IAAI,CAACI,MAAM,CAACG,OAAO,IAAI,OAAOH,MAAM,CAACG,OAAO,KAAK,QAAQ,EAAE;MAAEvH,YAAY,CAACqB,GAAG,EAAE,GAAG,EAAE;QAAEc,KAAK,EAAE;MAA+B,CAAC,EAAE6E,WAAW,CAAC;MAAE,OAAO,IAAI;IAAE;IAC1J,IAAII,MAAM,CAACG,OAAO,CAACzB,MAAM,GAAG,IAAI,EAAE;MAAE9F,YAAY,CAACqB,GAAG,EAAE,GAAG,EAAE;QAAEc,KAAK,EAAE;MAAyC,CAAC,EAAE6E,WAAW,CAAC;MAAE,OAAO,IAAI;IAAE;IAE3I,MAAMQ,QAAQ,GAAG7H,gBAAgB,CAAC,CAAC;IACnC,MAAM;MAAE0C,IAAI,EAAEoF;IAAQ,CAAC,GAAG,MAAMD,QAAQ,CAAC5E,IAAI,CAAC,UAAU,CAAC,CAACC,MAAM,CAAC,+CAA+C,CAAC,CAACC,EAAE,CAAC,IAAI,EAAEqE,SAAS,CAAC,CAACrE,EAAE,CAAC,MAAM,EAAE,SAAS,CAAC,CAACC,MAAM,CAAC,CAAC;IACpK,IAAI,CAAC0E,OAAO,EAAE;MAAEzH,YAAY,CAACqB,GAAG,EAAE,GAAG,EAAE;QAAEc,KAAK,EAAE;MAA4B,CAAC,EAAE6E,WAAW,CAAC;MAAE,OAAO,IAAI;IAAE;IAE1G,IAAI;MACF,MAAMU,SAAS,GAAG,MAAM9H,eAAe,CAAC4H,QAAQ,EAAEC,OAAO,CAACxE,QAAQ,EAAE,SAAS,CAAC;MAC9E,IAAI,CAACyE,SAAS,CAACC,OAAO,EAAE;QAAE3H,YAAY,CAACqB,GAAG,EAAE,GAAG,EAAE;UAAEc,KAAK,EAAEuF,SAAS,CAACE,MAAM,IAAI;QAAqB,CAAC,EAAEZ,WAAW,CAAC;QAAE,OAAO,IAAI;MAAE;IACnI,CAAC,CAAC,MAAM,CAAE;IAEV,MAAMa,QAAQ,GAAIT,MAAM,CAACU,SAAS,IAAe,WAAW;IAC5D,IAAIC,cAAsB,GAAIX,MAAM,CAACY,eAAe,IAAe,EAAE;IACrE,IAAI,CAACD,cAAc,EAAE;MACnB,MAAME,YAAY,GAAG,IAAIvC,IAAI,CAACA,IAAI,CAACwC,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAACC,WAAW,CAAC,CAAC;MACxE,MAAM;QAAE9F,IAAI,EAAE+F;MAAO,CAAC,GAAG,MAAMZ,QAAQ,CAAC5E,IAAI,CAAC,kBAAkB,CAAC,CAACC,MAAM,CAAC,iBAAiB,CAAC,CACvFC,EAAE,CAAC,YAAY,EAAEqE,SAAS,CAAC,CAACrE,EAAE,CAAC,WAAW,EAAE+E,QAAQ,CAAC,CAACQ,EAAE,CAAC,YAAY,EAAEJ,YAAY,CAAC,CACpFK,GAAG,CAAC,iBAAiB,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC3E,KAAK,CAAC,YAAY,EAAE;QAAEC,SAAS,EAAE;MAAM,CAAC,CAAC,CAACiC,KAAK,CAAC,CAAC,CAAC;MACxFkC,cAAc,GAAIK,MAAM,EAAEtC,MAAM,IAAIsC,MAAM,CAAC,CAAC,CAAC,CAACJ,eAAe,IAAKvI,UAAU,CAAC,CAAC;IAChF;IAEA,MAAM;MAAE4C,IAAI,EAAEsE,OAAO;MAAExE,KAAK,EAAEoG;IAAO,CAAC,GAAG,MAAMf,QAAQ,CAAC5E,IAAI,CAAC,kBAAkB,CAAC,CAAC4F,MAAM,CAAC;MACtFvF,QAAQ,EAAEwE,OAAO,CAACxE,QAAQ;MAAEwF,UAAU,EAAEtB,SAAS;MAAEuB,SAAS,EAAE,SAAS;MACvEZ,SAAS,EAAED,QAAQ;MAAEc,WAAW,EAAEvB,MAAM,CAACuB,WAAW,IAAI,SAAS;MACjEpB,OAAO,EAAEH,MAAM,CAACG,OAAO;MAAEqB,YAAY,EAAE,MAAM;MAC7CC,QAAQ,EAAE;QAAEC,MAAM,EAAE,SAAS;QAAEC,EAAE,EAAEnE,QAAQ;QAAEoE,cAAc,EAAE;MAAQ,CAAC;MACtEC,QAAQ,EAAExB,OAAO,CAACwB,QAAQ;MAAEjB,eAAe,EAAED;IAC/C,CAAC,CAAC,CAAClF,MAAM,CAAC,qDAAqD,CAAC,CAACE,MAAM,CAAC,CAAC;IACzE,IAAIwF,MAAM,EAAE;MAAEvI,YAAY,CAACqB,GAAG,EAAE,GAAG,EAAE;QAAEc,KAAK,EAAEoG,MAAM,CAAC5B;MAAQ,CAAC,EAAEK,WAAW,CAAC;MAAE,OAAO,IAAI;IAAE;IAE3FnH,cAAc,CAAC2H,QAAQ,EAAEC,OAAO,CAACxE,QAAQ,EAAE;MAAEiG,WAAW,EAAE;IAAE,CAAC,CAAC,CAACC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9E,IAAI;MAAE,MAAM3B,QAAQ,CAACrB,GAAG,CAAC,yBAAyB,EAAE;QAAEiD,YAAY,EAAEjC;MAAU,CAAC,CAAC;IAAE,CAAC,CAAC,MAAM,CAAE;IAE5F,IAAIkC,aAAkB,GAAG,IAAI;IAC7B,IAAI5B,OAAO,CAACwB,QAAQ,IAAItI,mBAAmB,EAAE;MAC3C,IAAI;QACF,MAAM2I,MAAM,GAAG,MAAM3I,mBAAmB,CAAC6G,QAAQ,EAAEC,OAAO,CAACwB,QAAQ,EAAE7B,MAAM,CAACG,OAAO,EAAEE,OAAO,CAACxE,QAAQ,EAAE8E,cAAc,CAAC;QACtH,IAAIuB,MAAM,CAAC5C,OAAO,IAAI4C,MAAM,CAACC,QAAQ,EAAE;UACrC,MAAM;YAAElH,IAAI,EAAEmH;UAAO,CAAC,GAAG,MAAMhC,QAAQ,CAAC5E,IAAI,CAAC,kBAAkB,CAAC,CAAC4F,MAAM,CAAC;YACtEvF,QAAQ,EAAEwE,OAAO,CAACxE,QAAQ;YAAEwF,UAAU,EAAEtB,SAAS;YAAEuB,SAAS,EAAE,UAAU;YACxEZ,SAAS,EAAE,OAAO;YAAEa,WAAW,EAAE,UAAU;YAC3CpB,OAAO,EAAE+B,MAAM,CAACC,QAAQ;YAAEX,YAAY,EAAE,MAAM;YAC9CC,QAAQ,EAAE;cAAEI,QAAQ,EAAExB,OAAO,CAACwB,QAAQ;cAAEQ,aAAa,EAAE,IAAI;cAAEX,MAAM,EAAE;YAAU,CAAC;YAChFG,QAAQ,EAAExB,OAAO,CAACwB,QAAQ;YAAEjB,eAAe,EAAED;UAC/C,CAAC,CAAC,CAAClF,MAAM,CAAC,qDAAqD,CAAC,CAACE,MAAM,CAAC,CAAC;UACzEsG,aAAa,GAAGG,MAAM;UACtB3J,cAAc,CAAC2H,QAAQ,EAAEC,OAAO,CAACxE,QAAQ,EAAE;YAAEyG,YAAY,EAAE,CAAC;YAAEC,iBAAiB,EAAE;UAAE,CAAC,CAAC,CAACR,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;QACvG;MACF,CAAC,CAAC,OAAOtC,GAAG,EAAE;QAAEnG,GAAG,CAACyB,KAAK,CAAC;UAAE0E,GAAG,EAAGA,GAAG,CAAWF;QAAQ,CAAC,EAAE,qBAAqB,CAAC;MAAE;IACrF;IAEA3G,YAAY,CAACqB,GAAG,EAAE,GAAG,EAAE;MAAEqF,OAAO,EAAE,IAAI;MAAEC,OAAO;MAAEiD,cAAc,EAAEP,aAAa;MAAErB,eAAe,EAAED;IAAe,CAAC,EAAEf,WAAW,CAAC;IAC/H,OAAO,IAAI;EACb;;EAEA;EACA,MAAM6C,mBAAmB,GAAGvI,QAAQ,CAACG,KAAK,CAAC,8CAA8C,CAAC;EAC1F,IAAIoI,mBAAmB,IAAIzI,GAAG,CAACI,MAAM,KAAK,KAAK,EAAE;IAC/C,MAAMoD,QAAQ,GAAGxD,GAAG,CAACS,OAAO,CAAC,iBAAiB,CAAC,EAAEgD,QAAQ,CAAC,CAAC,CAAClD,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAEmD,IAAI,CAAC,CAAC,IAAI1D,GAAG,CAAC2D,MAAM,CAACC,aAAa,IAAI,SAAS;IAC1H,IAAI7E,eAAe,CAACkB,GAAG,EAAEuD,QAAQ,EAAEoC,WAAW,CAAC,EAAE,OAAO,IAAI;IAE5D,MAAMG,SAAS,GAAG0C,mBAAmB,CAAC,CAAC,CAAC;IACxC,MAAMhC,QAAQ,GAAGzC,GAAG,CAACE,YAAY,CAACjC,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE;IACxD,MAAMyG,SAAS,GAAG1E,GAAG,CAACE,YAAY,CAACjC,GAAG,CAAC,iBAAiB,CAAC,IAAI,EAAE;IAC/D,IAAI,CAACwE,QAAQ,EAAE;MAAE7H,YAAY,CAACqB,GAAG,EAAE,GAAG,EAAE;QAAEc,KAAK,EAAE;MAAqC,CAAC,EAAE6E,WAAW,CAAC;MAAE,OAAO,IAAI;IAAE;IAEpH,MAAMQ,QAAQ,GAAG7H,gBAAgB,CAAC,CAAC;IACnC,MAAM;MAAE0C,IAAI,EAAE0H;IAAU,CAAC,GAAG,MAAMvC,QAAQ,CAAC5E,IAAI,CAAC,UAAU,CAAC,CAACC,MAAM,CAAC,UAAU,CAAC,CAACC,EAAE,CAAC,IAAI,EAAEqE,SAAS,CAAC,CAACrE,EAAE,CAAC,MAAM,EAAE,SAAS,CAAC,CAACC,MAAM,CAAC,CAAC;IACjI,IAAI,CAACgH,SAAS,EAAE;MAAE/J,YAAY,CAACqB,GAAG,EAAE,GAAG,EAAE;QAAEc,KAAK,EAAE;MAA4B,CAAC,EAAE6E,WAAW,CAAC;MAAE,OAAO,IAAI;IAAE;IAE5G,IAAI,CAAC,kBAAkB,CAACgD,IAAI,CAACnC,QAAQ,CAAC,EAAE;MAAE7H,YAAY,CAACqB,GAAG,EAAE,GAAG,EAAE;QAAEc,KAAK,EAAE;MAA2B,CAAC,EAAE6E,WAAW,CAAC;MAAE,OAAO,IAAI;IAAE;IACnI,IAAIiD,KAAK,GAAGzC,QAAQ,CAAC5E,IAAI,CAAC,kBAAkB,CAAC,CAC1CC,MAAM,CAAC,0EAA0E,CAAC,CAClFC,EAAE,CAAC,YAAY,EAAEqE,SAAS,CAAC;IAC9B,IAAI2C,SAAS,EAAE;MAAEG,KAAK,GAAGA,KAAK,CAACnH,EAAE,CAAC,iBAAiB,EAAEgH,SAAS,CAAC,CAACI,EAAE,CAAC,WAAW,EAAE,CAACrC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAAE,CAAC,MAClG;MAAEoC,KAAK,GAAGA,KAAK,CAACC,EAAE,CAAC,WAAW,EAAE,CAACrC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAAE;IAE3D,MAAM;MAAExF,IAAI,EAAE8H,QAAQ;MAAEhI,KAAK,EAAEiI;IAAQ,CAAC,GAAG,MAAMH,KAAK,CAACtG,KAAK,CAAC,YAAY,EAAE;MAAEC,SAAS,EAAE;IAAK,CAAC,CAAC,CAACiC,KAAK,CAAC,EAAE,CAAC;IACzG,IAAIuE,OAAO,EAAE;MAAEpK,YAAY,CAACqB,GAAG,EAAE,GAAG,EAAE;QAAEc,KAAK,EAAEiI,OAAO,CAACzD;MAAQ,CAAC,EAAEK,WAAW,CAAC;MAAE,OAAO,IAAI;IAAE;IAC7FhH,YAAY,CAACqB,GAAG,EAAE,GAAG,EAAE;MAAEqF,OAAO,EAAE,IAAI;MAAEyD,QAAQ,EAAEA,QAAQ,IAAI;IAAG,CAAC,EAAEnD,WAAW,CAAC;IAChF,OAAO,IAAI;EACb;;EAEA;EACA,IAAI1F,QAAQ,KAAK,oBAAoB,IAAIF,GAAG,CAACI,MAAM,KAAK,KAAK,EAAE;IAC7D,MAAM6I,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC;IAClC,MAAMC,IAAI,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC;IACtC,MAAMC,aAAa,GAAG,CACpBD,IAAI,CAACE,IAAI,CAACC,MAAM,CAACC,IAAI,CAACC,OAAO,IAAIC,SAAS,EAAE,8BAA8B,CAAC,EAC3EN,IAAI,CAACE,IAAI,CAACC,MAAM,CAACC,IAAI,CAACC,OAAO,IAAIC,SAAS,EAAE,iCAAiC,CAAC,EAC9EN,IAAI,CAACE,IAAI,CAACzJ,OAAO,CAAC8J,GAAG,CAAC,CAAC,EAAE,wBAAwB,CAAC,CACnD;IACD,IAAIC,QAAuB,GAAG,IAAI;IAClC,KAAK,MAAMC,CAAC,IAAIR,aAAa,EAAE;MAAE,IAAI;QAAEO,QAAQ,GAAGT,EAAE,CAACW,YAAY,CAACD,CAAC,EAAE,OAAO,CAAC;QAAE;MAAO,CAAC,CAAC,MAAM,CAAE;IAAiB;IACjH,IAAID,QAAQ,EAAE;MACZzJ,GAAG,CAACkC,SAAS,CAAC,GAAG,EAAE;QAAE,cAAc,EAAE,wBAAwB;QAAE,eAAe,EAAE,sBAAsB;QAAE,GAAGyD;MAAY,CAAC,CAAC;MACzH3F,GAAG,CAACyF,GAAG,CAACgE,QAAQ,CAAC;IACnB,CAAC,MAAM;MACLzJ,GAAG,CAACkC,SAAS,CAAC,GAAG,EAAE;QAAE,cAAc,EAAE,wBAAwB;QAAE,GAAGyD;MAAY,CAAC,CAAC;MAChF3F,GAAG,CAACyF,GAAG,CAAC,6IAA6I,CAAC;IACxJ;IACA,OAAO,IAAI;EACb;EAEA,OAAO,KAAK;AACd;;AAEA","ignoreList":[]}

package/dist/server/server-routes-waitpoints.d.ts

@@ -0,0 +1,4 @@
+import http from "node:http";
+import { type ServerContext } from "./server-helpers.js";
+export declare function handleConversationResume(req: http.IncomingMessage, res: http.ServerResponse, ctx: ServerContext): Promise<boolean>;
+export declare function handleWaitpointComplete(req: http.IncomingMessage, res: http.ServerResponse, ctx: ServerContext): Promise<boolean>;

package/dist/server/server-routes-waitpoints.js

@@ -0,0 +1,190 @@
+// server/server-routes-waitpoints.ts — Waitpoint and conversation resume handlers
+// Waitpoint complete POST and conversation resume POST
+// Extracted from index.ts for domain-based modularity.
+
+import { createLogger } from "./lib/logger.js";
+import { getServiceClient } from "./lib/supabase-client.js";
+import { loadCheckpoint } from "./lib/session-checkpoint.js";
+import { executeInlineChain } from "./handlers/workflows.js";
+import { jsonResponse, readBody, safeCompare } from "./server-helpers.js";
+const log = createLogger("server-routes-waitpoints");
+const SUPABASE_SERVICE_ROLE_KEY = process.env.SUPABASE_SERVICE_ROLE_KEY;
+const SERVICE_ROLE_JWT = process.env.SERVICE_ROLE_JWT || "";
+const FLY_INTERNAL_SECRET = process.env.FLY_INTERNAL_SECRET || "";
+
+// ============================================================================
+// HELPERS
+// ============================================================================
+
+function getToken(req) {
+  const authHeader = req.headers.authorization;
+  return authHeader?.startsWith("Bearer ") ? authHeader.substring(7) : "";
+}
+function isInternalAuth(token) {
+  return safeCompare(token, FLY_INTERNAL_SECRET) || safeCompare(token, SUPABASE_SERVICE_ROLE_KEY) || safeCompare(token, SERVICE_ROLE_JWT);
+}
+
+// ============================================================================
+// POST /conversations/:id/resume — Resume conversation from checkpoint
+// ============================================================================
+
+export async function handleConversationResume(req, res, ctx) {
+  const {
+    pathname,
+    corsHeaders
+  } = ctx;
+  const resumeMatch = pathname.match(/^\/conversations\/([a-f0-9-]+)\/resume$/);
+  if (!(resumeMatch && req.method === "POST")) return false;
+  const convId = resumeMatch[1];
+  const token = getToken(req);
+  const isInternal = isInternalAuth(token);
+  if (!isInternal && !token) {
+    jsonResponse(res, 401, {
+      error: "Missing authorization"
+    }, corsHeaders);
+    return true;
+  }
+  const supabase = getServiceClient();
+  if (!isInternal) {
+    const {
+      data: {
+        user: authUser
+      },
+      error: authError
+    } = await supabase.auth.getUser(token);
+    if (authError || !authUser) {
+      jsonResponse(res, 401, {
+        error: "Invalid or expired token"
+      }, corsHeaders);
+      return true;
+    }
+  }
+
+  // Drain the request body (even if we don't use it) to prevent Fly proxy stalls
+  try {
+    await readBody(req);
+  } catch {/* body not needed */}
+  const checkpoint = await loadCheckpoint(supabase, convId);
+  if (!checkpoint) {
+    jsonResponse(res, 404, {
+      error: "No checkpoint found for this conversation"
+    }, corsHeaders);
+    return true;
+  }
+
+  // Parse messages back from serialized form
+  let parsedMessages;
+  try {
+    parsedMessages = JSON.parse(checkpoint.messages);
+  } catch {
+    jsonResponse(res, 422, {
+      error: "Checkpoint messages corrupted"
+    }, corsHeaders);
+    return true;
+  }
+  jsonResponse(res, 200, {
+    success: true,
+    conversation_id: checkpoint.conversation_id,
+    turn: checkpoint.turn,
+    messages: parsedMessages,
+    tokens_used: checkpoint.tokens_used,
+    cost_so_far: checkpoint.cost_so_far,
+    tools_used: checkpoint.tools_used,
+    checkpointed_at: checkpoint.created_at
+  }, corsHeaders);
+  return true;
+}
+
+// ============================================================================
+// POST /waitpoints/:token/complete — Waitpoint completion
+// ============================================================================
+
+export async function handleWaitpointComplete(req, res, ctx) {
+  const {
+    pathname,
+    corsHeaders
+  } = ctx;
+  const waitpointMatch = pathname.match(/^\/waitpoints\/([a-f0-9-]+)\/complete$/);
+  if (!waitpointMatch || req.method !== "POST") return false;
+  const wpToken = waitpointMatch[1];
+  const authToken = getToken(req);
+  const isInternal = isInternalAuth(authToken);
+  if (!isInternal && !authToken) {
+    jsonResponse(res, 401, {
+      error: "Missing authorization"
+    }, corsHeaders);
+    return true;
+  }
+  const supabase = getServiceClient();
+  let rawBody;
+  try {
+    rawBody = await readBody(req);
+  } catch {
+    jsonResponse(res, 413, {
+      error: "Request body too large"
+    }, corsHeaders);
+    return true;
+  }
+  let body;
+  try {
+    body = JSON.parse(rawBody || "{}");
+  } catch {
+    jsonResponse(res, 400, {
+      error: "Invalid JSON"
+    }, corsHeaders);
+    return true;
+  }
+
+  // Find waitpoint
+  const {
+    data: wp
+  } = await supabase.from("waitpoint_tokens").select("id, run_id, step_run_id, store_id, expires_at, status").eq("token", wpToken).single();
+  if (!wp) {
+    jsonResponse(res, 404, {
+      error: "Waitpoint token not found"
+    }, corsHeaders);
+    return true;
+  }
+  if (wp.status === "completed") {
+    jsonResponse(res, 409, {
+      error: "Waitpoint already completed"
+    }, corsHeaders);
+    return true;
+  }
+  if (new Date(wp.expires_at) < new Date()) {
+    jsonResponse(res, 410, {
+      error: "Waitpoint expired"
+    }, corsHeaders);
+    return true;
+  }
+
+  // Complete it
+  await supabase.from("waitpoint_tokens").update({
+    status: "completed",
+    completion_data: body.data || {},
+    completed_at: new Date().toISOString()
+  }).eq("id", wp.id);
+  await supabase.from("workflow_step_runs").update({
+    status: "pending",
+    input: {
+      waitpoint_completed: true,
+      waitpoint_data: body.data || {}
+    }
+  }).eq("id", wp.step_run_id).eq("status", "waiting");
+
+  // Inline resume
+  try {
+    await executeInlineChain(supabase, wp.run_id);
+  } catch (err) {
+    log.error({
+      err: err.message,
+      runId: wp.run_id
+    }, "inline chain failed after waitpoint");
+  }
+  jsonResponse(res, 200, {
+    success: true,
+    run_id: wp.run_id
+  }, corsHeaders);
+  return true;
+}
+//# sourceMappingURL=server-routes-waitpoints.js.map

package/dist/server/server-routes-waitpoints.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-routes-waitpoints.js","names":["createLogger","getServiceClient","loadCheckpoint","executeInlineChain","jsonResponse","readBody","safeCompare","log","SUPABASE_SERVICE_ROLE_KEY","process","env","SERVICE_ROLE_JWT","FLY_INTERNAL_SECRET","getToken","req","authHeader","headers","authorization","startsWith","substring","isInternalAuth","token","handleConversationResume","res","ctx","pathname","corsHeaders","resumeMatch","match","method","convId","isInternal","error","supabase","data","user","authUser","authError","auth","getUser","checkpoint","parsedMessages","JSON","parse","messages","success","conversation_id","turn","tokens_used","cost_so_far","tools_used","checkpointed_at","created_at","handleWaitpointComplete","waitpointMatch","wpToken","authToken","rawBody","body","wp","from","select","eq","single","status","Date","expires_at","update","completion_data","completed_at","toISOString","id","input","waitpoint_completed","waitpoint_data","step_run_id","run_id","err","message","runId"],"sources":["../../src/server/server-routes-waitpoints.ts"],"sourcesContent":["// server/server-routes-waitpoints.ts — Waitpoint and conversation resume handlers\n// Waitpoint complete POST and conversation resume POST\n// Extracted from index.ts for domain-based modularity.\n\nimport http from \"node:http\";\nimport { createLogger } from \"./lib/logger.js\";\nimport { getServiceClient } from \"./lib/supabase-client.js\";\nimport { loadCheckpoint } from \"./lib/session-checkpoint.js\";\nimport { executeInlineChain } from \"./handlers/workflows.js\";\nimport { jsonResponse, readBody, safeCompare, type ServerContext } from \"./server-helpers.js\";\n\nconst log = createLogger(\"server-routes-waitpoints\");\n\nconst SUPABASE_SERVICE_ROLE_KEY = process.env.SUPABASE_SERVICE_ROLE_KEY!;\nconst SERVICE_ROLE_JWT = process.env.SERVICE_ROLE_JWT || \"\";\nconst FLY_INTERNAL_SECRET = process.env.FLY_INTERNAL_SECRET || \"\";\n\n// ============================================================================\n// HELPERS\n// ============================================================================\n\nfunction getToken(req: http.IncomingMessage): string {\n  const authHeader = req.headers.authorization;\n  return authHeader?.startsWith(\"Bearer \") ? authHeader.substring(7) : \"\";\n}\n\nfunction isInternalAuth(token: string): boolean {\n  return safeCompare(token, FLY_INTERNAL_SECRET) || safeCompare(token, SUPABASE_SERVICE_ROLE_KEY) || safeCompare(token, SERVICE_ROLE_JWT);\n}\n\n// ============================================================================\n// POST /conversations/:id/resume — Resume conversation from checkpoint\n// ============================================================================\n\nexport async function handleConversationResume(\n  req: http.IncomingMessage,\n  res: http.ServerResponse,\n  ctx: ServerContext,\n): Promise<boolean> {\n  const { pathname, corsHeaders } = ctx;\n\n  const resumeMatch = pathname.match(/^\\/conversations\\/([a-f0-9-]+)\\/resume$/);\n  if (!(resumeMatch && req.method === \"POST\")) return false;\n\n  const convId = resumeMatch[1];\n  const token = getToken(req);\n  const isInternal = isInternalAuth(token);\n\n  if (!isInternal && !token) {\n    jsonResponse(res, 401, { error: \"Missing authorization\" }, corsHeaders);\n    return true;\n  }\n\n  const supabase = getServiceClient();\n\n  if (!isInternal) {\n    const { data: { user: authUser }, error: authError } = await supabase.auth.getUser(token);\n    if (authError || !authUser) {\n      jsonResponse(res, 401, { error: \"Invalid or expired token\" }, corsHeaders);\n      return true;\n    }\n  }\n\n  // Drain the request body (even if we don't use it) to prevent Fly proxy stalls\n  try { await readBody(req); } catch { /* body not needed */ }\n\n  const checkpoint = await loadCheckpoint(supabase, convId);\n  if (!checkpoint) {\n    jsonResponse(res, 404, { error: \"No checkpoint found for this conversation\" }, corsHeaders);\n    return true;\n  }\n\n  // Parse messages back from serialized form\n  let parsedMessages: unknown[];\n  try {\n    parsedMessages = JSON.parse(checkpoint.messages);\n  } catch {\n    jsonResponse(res, 422, { error: \"Checkpoint messages corrupted\" }, corsHeaders);\n    return true;\n  }\n\n  jsonResponse(res, 200, {\n    success: true,\n    conversation_id: checkpoint.conversation_id,\n    turn: checkpoint.turn,\n    messages: parsedMessages,\n    tokens_used: checkpoint.tokens_used,\n    cost_so_far: checkpoint.cost_so_far,\n    tools_used: checkpoint.tools_used,\n    checkpointed_at: checkpoint.created_at,\n  }, corsHeaders);\n  return true;\n}\n\n// ============================================================================\n// POST /waitpoints/:token/complete — Waitpoint completion\n// ============================================================================\n\nexport async function handleWaitpointComplete(\n  req: http.IncomingMessage,\n  res: http.ServerResponse,\n  ctx: ServerContext,\n): Promise<boolean> {\n  const { pathname, corsHeaders } = ctx;\n\n  const waitpointMatch = pathname.match(/^\\/waitpoints\\/([a-f0-9-]+)\\/complete$/);\n  if (!waitpointMatch || req.method !== \"POST\") return false;\n\n  const wpToken = waitpointMatch[1];\n  const authToken = getToken(req);\n  const isInternal = isInternalAuth(authToken);\n\n  if (!isInternal && !authToken) {\n    jsonResponse(res, 401, { error: \"Missing authorization\" }, corsHeaders);\n    return true;\n  }\n\n  const supabase = getServiceClient();\n\n  let rawBody: string;\n  try { rawBody = await readBody(req); } catch {\n    jsonResponse(res, 413, { error: \"Request body too large\" }, corsHeaders);\n    return true;\n  }\n  let body: any;\n  try { body = JSON.parse(rawBody || \"{}\"); } catch {\n    jsonResponse(res, 400, { error: \"Invalid JSON\" }, corsHeaders);\n    return true;\n  }\n\n  // Find waitpoint\n  const { data: wp } = await supabase.from(\"waitpoint_tokens\")\n    .select(\"id, run_id, step_run_id, store_id, expires_at, status\")\n    .eq(\"token\", wpToken).single();\n  if (!wp) {\n    jsonResponse(res, 404, { error: \"Waitpoint token not found\" }, corsHeaders);\n    return true;\n  }\n  if (wp.status === \"completed\") {\n    jsonResponse(res, 409, { error: \"Waitpoint already completed\" }, corsHeaders);\n    return true;\n  }\n  if (new Date(wp.expires_at) < new Date()) {\n    jsonResponse(res, 410, { error: \"Waitpoint expired\" }, corsHeaders);\n    return true;\n  }\n\n  // Complete it\n  await supabase.from(\"waitpoint_tokens\").update({\n    status: \"completed\", completion_data: body.data || {}, completed_at: new Date().toISOString(),\n  }).eq(\"id\", wp.id);\n\n  await supabase.from(\"workflow_step_runs\").update({\n    status: \"pending\", input: { waitpoint_completed: true, waitpoint_data: body.data || {} },\n  }).eq(\"id\", wp.step_run_id).eq(\"status\", \"waiting\");\n\n  // Inline resume\n  try {\n    await executeInlineChain(supabase, wp.run_id);\n  } catch (err) {\n    log.error({ err: (err as Error).message, runId: wp.run_id }, \"inline chain failed after waitpoint\");\n  }\n\n  jsonResponse(res, 200, { success: true, run_id: wp.run_id }, corsHeaders);\n  return true;\n}\n"],"mappings":"AAAA;AACA;AACA;;AAGA,SAASA,YAAY,QAAQ,iBAAiB;AAC9C,SAASC,gBAAgB,QAAQ,0BAA0B;AAC3D,SAASC,cAAc,QAAQ,6BAA6B;AAC5D,SAASC,kBAAkB,QAAQ,yBAAyB;AAC5D,SAASC,YAAY,EAAEC,QAAQ,EAAEC,WAAW,QAA4B,qBAAqB;AAE7F,MAAMC,GAAG,GAAGP,YAAY,CAAC,0BAA0B,CAAC;AAEpD,MAAMQ,yBAAyB,GAAGC,OAAO,CAACC,GAAG,CAACF,yBAA0B;AACxE,MAAMG,gBAAgB,GAAGF,OAAO,CAACC,GAAG,CAACC,gBAAgB,IAAI,EAAE;AAC3D,MAAMC,mBAAmB,GAAGH,OAAO,CAACC,GAAG,CAACE,mBAAmB,IAAI,EAAE;;AAEjE;AACA;AACA;;AAEA,SAASC,QAAQA,CAACC,GAAyB,EAAU;EACnD,MAAMC,UAAU,GAAGD,GAAG,CAACE,OAAO,CAACC,aAAa;EAC5C,OAAOF,UAAU,EAAEG,UAAU,CAAC,SAAS,CAAC,GAAGH,UAAU,CAACI,SAAS,CAAC,CAAC,CAAC,GAAG,EAAE;AACzE;AAEA,SAASC,cAAcA,CAACC,KAAa,EAAW;EAC9C,OAAOf,WAAW,CAACe,KAAK,EAAET,mBAAmB,CAAC,IAAIN,WAAW,CAACe,KAAK,EAAEb,yBAAyB,CAAC,IAAIF,WAAW,CAACe,KAAK,EAAEV,gBAAgB,CAAC;AACzI;;AAEA;AACA;AACA;;AAEA,OAAO,eAAeW,wBAAwBA,CAC5CR,GAAyB,EACzBS,GAAwB,EACxBC,GAAkB,EACA;EAClB,MAAM;IAAEC,QAAQ;IAAEC;EAAY,CAAC,GAAGF,GAAG;EAErC,MAAMG,WAAW,GAAGF,QAAQ,CAACG,KAAK,CAAC,yCAAyC,CAAC;EAC7E,IAAI,EAAED,WAAW,IAAIb,GAAG,CAACe,MAAM,KAAK,MAAM,CAAC,EAAE,OAAO,KAAK;EAEzD,MAAMC,MAAM,GAAGH,WAAW,CAAC,CAAC,CAAC;EAC7B,MAAMN,KAAK,GAAGR,QAAQ,CAACC,GAAG,CAAC;EAC3B,MAAMiB,UAAU,GAAGX,cAAc,CAACC,KAAK,CAAC;EAExC,IAAI,CAACU,UAAU,IAAI,CAACV,KAAK,EAAE;IACzBjB,YAAY,CAACmB,GAAG,EAAE,GAAG,EAAE;MAAES,KAAK,EAAE;IAAwB,CAAC,EAAEN,WAAW,CAAC;IACvE,OAAO,IAAI;EACb;EAEA,MAAMO,QAAQ,GAAGhC,gBAAgB,CAAC,CAAC;EAEnC,IAAI,CAAC8B,UAAU,EAAE;IACf,MAAM;MAAEG,IAAI,EAAE;QAAEC,IAAI,EAAEC;MAAS,CAAC;MAAEJ,KAAK,EAAEK;IAAU,CAAC,GAAG,MAAMJ,QAAQ,CAACK,IAAI,CAACC,OAAO,CAAClB,KAAK,CAAC;IACzF,IAAIgB,SAAS,IAAI,CAACD,QAAQ,EAAE;MAC1BhC,YAAY,CAACmB,GAAG,EAAE,GAAG,EAAE;QAAES,KAAK,EAAE;MAA2B,CAAC,EAAEN,WAAW,CAAC;MAC1E,OAAO,IAAI;IACb;EACF;;EAEA;EACA,IAAI;IAAE,MAAMrB,QAAQ,CAACS,GAAG,CAAC;EAAE,CAAC,CAAC,MAAM,CAAE;EAErC,MAAM0B,UAAU,GAAG,MAAMtC,cAAc,CAAC+B,QAAQ,EAAEH,MAAM,CAAC;EACzD,IAAI,CAACU,UAAU,EAAE;IACfpC,YAAY,CAACmB,GAAG,EAAE,GAAG,EAAE;MAAES,KAAK,EAAE;IAA4C,CAAC,EAAEN,WAAW,CAAC;IAC3F,OAAO,IAAI;EACb;;EAEA;EACA,IAAIe,cAAyB;EAC7B,IAAI;IACFA,cAAc,GAAGC,IAAI,CAACC,KAAK,CAACH,UAAU,CAACI,QAAQ,CAAC;EAClD,CAAC,CAAC,MAAM;IACNxC,YAAY,CAACmB,GAAG,EAAE,GAAG,EAAE;MAAES,KAAK,EAAE;IAAgC,CAAC,EAAEN,WAAW,CAAC;IAC/E,OAAO,IAAI;EACb;EAEAtB,YAAY,CAACmB,GAAG,EAAE,GAAG,EAAE;IACrBsB,OAAO,EAAE,IAAI;IACbC,eAAe,EAAEN,UAAU,CAACM,eAAe;IAC3CC,IAAI,EAAEP,UAAU,CAACO,IAAI;IACrBH,QAAQ,EAAEH,cAAc;IACxBO,WAAW,EAAER,UAAU,CAACQ,WAAW;IACnCC,WAAW,EAAET,UAAU,CAACS,WAAW;IACnCC,UAAU,EAAEV,UAAU,CAACU,UAAU;IACjCC,eAAe,EAAEX,UAAU,CAACY;EAC9B,CAAC,EAAE1B,WAAW,CAAC;EACf,OAAO,IAAI;AACb;;AAEA;AACA;AACA;;AAEA,OAAO,eAAe2B,uBAAuBA,CAC3CvC,GAAyB,EACzBS,GAAwB,EACxBC,GAAkB,EACA;EAClB,MAAM;IAAEC,QAAQ;IAAEC;EAAY,CAAC,GAAGF,GAAG;EAErC,MAAM8B,cAAc,GAAG7B,QAAQ,CAACG,KAAK,CAAC,wCAAwC,CAAC;EAC/E,IAAI,CAAC0B,cAAc,IAAIxC,GAAG,CAACe,MAAM,KAAK,MAAM,EAAE,OAAO,KAAK;EAE1D,MAAM0B,OAAO,GAAGD,cAAc,CAAC,CAAC,CAAC;EACjC,MAAME,SAAS,GAAG3C,QAAQ,CAACC,GAAG,CAAC;EAC/B,MAAMiB,UAAU,GAAGX,cAAc,CAACoC,SAAS,CAAC;EAE5C,IAAI,CAACzB,UAAU,IAAI,CAACyB,SAAS,EAAE;IAC7BpD,YAAY,CAACmB,GAAG,EAAE,GAAG,EAAE;MAAES,KAAK,EAAE;IAAwB,CAAC,EAAEN,WAAW,CAAC;IACvE,OAAO,IAAI;EACb;EAEA,MAAMO,QAAQ,GAAGhC,gBAAgB,CAAC,CAAC;EAEnC,IAAIwD,OAAe;EACnB,IAAI;IAAEA,OAAO,GAAG,MAAMpD,QAAQ,CAACS,GAAG,CAAC;EAAE,CAAC,CAAC,MAAM;IAC3CV,YAAY,CAACmB,GAAG,EAAE,GAAG,EAAE;MAAES,KAAK,EAAE;IAAyB,CAAC,EAAEN,WAAW,CAAC;IACxE,OAAO,IAAI;EACb;EACA,IAAIgC,IAAS;EACb,IAAI;IAAEA,IAAI,GAAGhB,IAAI,CAACC,KAAK,CAACc,OAAO,IAAI,IAAI,CAAC;EAAE,CAAC,CAAC,MAAM;IAChDrD,YAAY,CAACmB,GAAG,EAAE,GAAG,EAAE;MAAES,KAAK,EAAE;IAAe,CAAC,EAAEN,WAAW,CAAC;IAC9D,OAAO,IAAI;EACb;;EAEA;EACA,MAAM;IAAEQ,IAAI,EAAEyB;EAAG,CAAC,GAAG,MAAM1B,QAAQ,CAAC2B,IAAI,CAAC,kBAAkB,CAAC,CACzDC,MAAM,CAAC,uDAAuD,CAAC,CAC/DC,EAAE,CAAC,OAAO,EAAEP,OAAO,CAAC,CAACQ,MAAM,CAAC,CAAC;EAChC,IAAI,CAACJ,EAAE,EAAE;IACPvD,YAAY,CAACmB,GAAG,EAAE,GAAG,EAAE;MAAES,KAAK,EAAE;IAA4B,CAAC,EAAEN,WAAW,CAAC;IAC3E,OAAO,IAAI;EACb;EACA,IAAIiC,EAAE,CAACK,MAAM,KAAK,WAAW,EAAE;IAC7B5D,YAAY,CAACmB,GAAG,EAAE,GAAG,EAAE;MAAES,KAAK,EAAE;IAA8B,CAAC,EAAEN,WAAW,CAAC;IAC7E,OAAO,IAAI;EACb;EACA,IAAI,IAAIuC,IAAI,CAACN,EAAE,CAACO,UAAU,CAAC,GAAG,IAAID,IAAI,CAAC,CAAC,EAAE;IACxC7D,YAAY,CAACmB,GAAG,EAAE,GAAG,EAAE;MAAES,KAAK,EAAE;IAAoB,CAAC,EAAEN,WAAW,CAAC;IACnE,OAAO,IAAI;EACb;;EAEA;EACA,MAAMO,QAAQ,CAAC2B,IAAI,CAAC,kBAAkB,CAAC,CAACO,MAAM,CAAC;IAC7CH,MAAM,EAAE,WAAW;IAAEI,eAAe,EAAEV,IAAI,CAACxB,IAAI,IAAI,CAAC,CAAC;IAAEmC,YAAY,EAAE,IAAIJ,IAAI,CAAC,CAAC,CAACK,WAAW,CAAC;EAC9F,CAAC,CAAC,CAACR,EAAE,CAAC,IAAI,EAAEH,EAAE,CAACY,EAAE,CAAC;EAElB,MAAMtC,QAAQ,CAAC2B,IAAI,CAAC,oBAAoB,CAAC,CAACO,MAAM,CAAC;IAC/CH,MAAM,EAAE,SAAS;IAAEQ,KAAK,EAAE;MAAEC,mBAAmB,EAAE,IAAI;MAAEC,cAAc,EAAEhB,IAAI,CAACxB,IAAI,IAAI,CAAC;IAAE;EACzF,CAAC,CAAC,CAAC4B,EAAE,CAAC,IAAI,EAAEH,EAAE,CAACgB,WAAW,CAAC,CAACb,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC;;EAEnD;EACA,IAAI;IACF,MAAM3D,kBAAkB,CAAC8B,QAAQ,EAAE0B,EAAE,CAACiB,MAAM,CAAC;EAC/C,CAAC,CAAC,OAAOC,GAAG,EAAE;IACZtE,GAAG,CAACyB,KAAK,CAAC;MAAE6C,GAAG,EAAGA,GAAG,CAAWC,OAAO;MAAEC,KAAK,EAAEpB,EAAE,CAACiB;IAAO,CAAC,EAAE,qCAAqC,CAAC;EACrG;EAEAxE,YAAY,CAACmB,GAAG,EAAE,GAAG,EAAE;IAAEsB,OAAO,EAAE,IAAI;IAAE+B,MAAM,EAAEjB,EAAE,CAACiB;EAAO,CAAC,EAAElD,WAAW,CAAC;EACzE,OAAO,IAAI;AACb","ignoreList":[]}

package/dist/server/server-routes-webchat.d.ts

@@ -0,0 +1,14 @@
+import http from "node:http";
+import type { SupabaseClient } from "@supabase/supabase-js";
+import { type ServerContext } from "./server-helpers.js";
+import type { SenderContext } from "./handlers/nodes.js";
+declare let webchatAgentInvoker: ((supabase: SupabaseClient, agentId: string, message: string, storeId: string, conversationId: string, senderContext?: SenderContext) => Promise<{
+    success: boolean;
+    response?: string;
+    error?: string;
+}>) | null;
+export declare function setWebchatAgentInvoker(invoker: typeof webchatAgentInvoker): void;
+export declare function handleWebchatMessage(req: http.IncomingMessage, res: http.ServerResponse, ctx: ServerContext): Promise<boolean>;
+export declare function handleWebchatHistory(req: http.IncomingMessage, res: http.ServerResponse, ctx: ServerContext): Promise<boolean>;
+export declare function handleWebchatWidget(req: http.IncomingMessage, res: http.ServerResponse, ctx: ServerContext): Promise<boolean>;
+export {};

package/dist/server/server-routes-webchat.js

@@ -0,0 +1,307 @@
+// server/server-routes-webchat.ts — Webchat route handlers
+// Anonymous access for embedded chat widgets
+// Extracted from index.ts for domain-based modularity.
+
+import { randomUUID } from "node:crypto";
+import { createLogger } from "./lib/logger.js";
+import { getServiceClient } from "./lib/supabase-client.js";
+import { checkPlanLimits, incrementUsage } from "./handlers/billing.js";
+import { jsonResponse, readBody } from "./server-helpers.js";
+import { sendIpRateLimit } from "./server-rate-limit.js";
+const log = createLogger("server-routes-webchat");
+
+// Webchat agent invoker — set later to avoid circular deps
+let webchatAgentInvoker = null;
+export function setWebchatAgentInvoker(invoker) {
+  webchatAgentInvoker = invoker;
+}
+
+// ============================================================================
+// POST /webchat/channels/:id/messages — Send message (+ agent auto-reply)
+// ============================================================================
+
+export async function handleWebchatMessage(req, res, ctx) {
+  const {
+    pathname,
+    corsHeaders
+  } = ctx;
+
+  // Webchat CORS: allow any origin (widget is embedded on customer sites)
+  const webchatCors = {
+    ...corsHeaders,
+    "Access-Control-Allow-Origin": "*"
+  };
+  const webchatMsgMatch = pathname.match(/^\/webchat\/channels\/([a-f0-9-]+)\/messages$/);
+  if (!(webchatMsgMatch && req.method === "POST")) return false;
+  const clientIp = req.headers["x-forwarded-for"]?.toString().split(",")[0]?.trim() || req.socket.remoteAddress || "unknown";
+  if (sendIpRateLimit(res, clientIp, webchatCors)) return true;
+  let rawBody;
+  try {
+    rawBody = await readBody(req);
+  } catch {
+    jsonResponse(res, 413, {
+      error: "Request body too large"
+    }, webchatCors);
+    return true;
+  }
+  const channelId = webchatMsgMatch[1];
+  let wcBody;
+  try {
+    wcBody = JSON.parse(rawBody);
+  } catch {
+    jsonResponse(res, 400, {
+      error: "Invalid JSON"
+    }, webchatCors);
+    return true;
+  }
+  if (!wcBody.content || typeof wcBody.content !== "string") {
+    jsonResponse(res, 400, {
+      error: "content (string) is required"
+    }, webchatCors);
+    return true;
+  }
+  if (wcBody.content.length > 5000) {
+    jsonResponse(res, 400, {
+      error: "Message too long (max 5000 characters)"
+    }, webchatCors);
+    return true;
+  }
+  const supabase = getServiceClient();
+
+  // Verify channel exists and is a webchat channel
+  const {
+    data: channel
+  } = await supabase.from("channels").select("id, store_id, node_id, agent_id, type, config").eq("id", channelId).eq("type", "webchat").single();
+  if (!channel) {
+    jsonResponse(res, 404, {
+      error: "Webchat channel not found"
+    }, webchatCors);
+    return true;
+  }
+
+  // Rate limit per store (best-effort)
+  try {
+    const planCheck = await checkPlanLimits(supabase, channel.store_id, "message");
+    if (!planCheck.allowed) {
+      jsonResponse(res, 429, {
+        error: planCheck.reason || "Plan limit reached"
+      }, webchatCors);
+      return true;
+    }
+  } catch {/* billing tables may not exist yet */}
+  const senderId = wcBody.sender_id || "anonymous";
+
+  // Resolve conversation: reuse if sender had activity < 30 min ago, else new UUID
+  let conversationId = wcBody.conversation_id || "";
+  if (!conversationId) {
+    const thirtyMinAgo = new Date(Date.now() - 30 * 60 * 1000).toISOString();
+    const {
+      data: recent
+    } = await supabase.from("channel_messages").select("conversation_id").eq("channel_id", channelId).eq("sender_id", senderId).gt("created_at", thirtyMinAgo).not("conversation_id", "is", null).order("created_at", {
+      ascending: false
+    }).limit(1);
+    conversationId = recent?.length && recent[0].conversation_id || randomUUID();
+  }
+
+  // Insert inbound message
+  const {
+    data: message,
+    error: msgErr
+  } = await supabase.from("channel_messages").insert({
+    store_id: channel.store_id,
+    channel_id: channelId,
+    direction: "inbound",
+    sender_id: senderId,
+    sender_name: wcBody.sender_name || "Visitor",
+    content: wcBody.content,
+    content_type: "text",
+    metadata: {
+      source: "webchat",
+      ip: clientIp,
+      widget_version: "1.0.0"
+    },
+    agent_id: channel.agent_id,
+    conversation_id: conversationId
+  }).select("id, direction, content, conversation_id, created_at").single();
+  if (msgErr) {
+    jsonResponse(res, 500, {
+      error: msgErr.message
+    }, webchatCors);
+    return true;
+  }
+
+  // Track usage + channel stats (best-effort)
+  incrementUsage(supabase, channel.store_id, {
+    messages_in: 1
+  }).catch(() => {});
+  try {
+    await supabase.rpc("increment_channel_stats", {
+      p_channel_id: channelId
+    });
+  } catch {/* ok */}
+
+  // Auto-invoke agent if assigned
+  let agentResponse = null;
+  if (channel.agent_id && webchatAgentInvoker) {
+    try {
+      const result = await webchatAgentInvoker(supabase, channel.agent_id, wcBody.content, channel.store_id, conversationId);
+      if (result.success && result.response) {
+        const {
+          data: outMsg
+        } = await supabase.from("channel_messages").insert({
+          store_id: channel.store_id,
+          channel_id: channelId,
+          direction: "outbound",
+          sender_id: "agent",
+          sender_name: "AI Agent",
+          content: result.response,
+          content_type: "text",
+          metadata: {
+            agent_id: channel.agent_id,
+            auto_response: true,
+            source: "webchat"
+          },
+          agent_id: channel.agent_id,
+          conversation_id: conversationId
+        }).select("id, direction, content, conversation_id, created_at").single();
+        agentResponse = outMsg;
+        incrementUsage(supabase, channel.store_id, {
+          messages_out: 1,
+          agent_invocations: 1
+        }).catch(() => {});
+      }
+    } catch (err) {
+      log.error({
+        err: err.message
+      }, "webchat agent error");
+    }
+  }
+  jsonResponse(res, 201, {
+    success: true,
+    message,
+    agent_response: agentResponse,
+    conversation_id: conversationId
+  }, webchatCors);
+  return true;
+}
+
+// ============================================================================
+// GET /webchat/channels/:id/history — Load conversation history for widget
+// ============================================================================
+
+export async function handleWebchatHistory(req, res, ctx) {
+  const {
+    pathname,
+    url,
+    corsHeaders
+  } = ctx;
+  const webchatCors = {
+    ...corsHeaders,
+    "Access-Control-Allow-Origin": "*"
+  };
+  const webchatHistoryMatch = pathname.match(/^\/webchat\/channels\/([a-f0-9-]+)\/history$/);
+  if (!(webchatHistoryMatch && req.method === "GET")) return false;
+  const clientIp = req.headers["x-forwarded-for"]?.toString().split(",")[0]?.trim() || req.socket.remoteAddress || "unknown";
+  if (sendIpRateLimit(res, clientIp, webchatCors)) return true;
+  const channelId = webchatHistoryMatch[1];
+  const params = url.searchParams;
+  const senderId = params.get("sender_id") || "";
+  const reqConvId = params.get("conversation_id") || "";
+  if (!senderId) {
+    jsonResponse(res, 400, {
+      error: "sender_id query parameter required"
+    }, webchatCors);
+    return true;
+  }
+  const supabase = getServiceClient();
+
+  // Verify channel is webchat type
+  const {
+    data: wcChannel
+  } = await supabase.from("channels").select("id, type").eq("id", channelId).eq("type", "webchat").single();
+  if (!wcChannel) {
+    jsonResponse(res, 404, {
+      error: "Webchat channel not found"
+    }, webchatCors);
+    return true;
+  }
+
+  // Get messages — by conversation_id if available, or by sender
+  // P0 FIX: Always filter by sender_id to prevent cross-sender data leak
+  let query = supabase.from("channel_messages").select("id, direction, sender_id, sender_name, content, content_type, created_at").eq("channel_id", channelId);
+
+  // P0 FIX: Validate senderId against strict pattern to prevent PostgREST filter injection
+  // Only allow alphanumeric characters, hyphens, and underscores (blocks .eq., .neq., dots, etc.)
+  if (!/^[a-zA-Z0-9_-]+$/.test(senderId)) {
+    jsonResponse(res, 400, {
+      error: "Invalid sender_id format"
+    }, webchatCors);
+    return true;
+  }
+  if (reqConvId) {
+    // P0 FIX: Use parameterized .in() filter instead of string interpolation in .or()
+    query = query.eq("conversation_id", reqConvId).in("sender_id", [senderId, "agent"]);
+  } else {
+    query = query.in("sender_id", [senderId, "agent"]);
+  }
+  const {
+    data: messages,
+    error: histErr
+  } = await query.order("created_at", {
+    ascending: true
+  }).limit(50);
+  if (histErr) {
+    jsonResponse(res, 500, {
+      error: histErr.message
+    }, webchatCors);
+    return true;
+  }
+  jsonResponse(res, 200, {
+    success: true,
+    messages: messages || []
+  }, webchatCors);
+  return true;
+}
+
+// ============================================================================
+// GET /webchat/widget.js — Serve compiled widget JavaScript
+// ============================================================================
+
+export async function handleWebchatWidget(req, res, ctx) {
+  const {
+    pathname,
+    corsHeaders
+  } = ctx;
+  if (!(pathname === "/webchat/widget.js" && req.method === "GET")) return false;
+  const webchatCors = {
+    ...corsHeaders,
+    "Access-Control-Allow-Origin": "*"
+  };
+  const fs = await import("node:fs");
+  const path = await import("node:path");
+  // Try multiple possible locations for the built widget file
+  const possiblePaths = [path.join(import.meta.dirname || __dirname, "../../dist/webchat/widget.js"), path.join(import.meta.dirname || __dirname, "../../../dist/webchat/widget.js"), path.join(process.cwd(), "dist/webchat/widget.js")];
+  let widgetJs = null;
+  for (const p of possiblePaths) {
+    try {
+      widgetJs = fs.readFileSync(p, "utf-8");
+      break;
+    } catch {/* try next */}
+  }
+  if (widgetJs) {
+    res.writeHead(200, {
+      "Content-Type": "application/javascript",
+      "Cache-Control": "public, max-age=3600",
+      ...webchatCors
+    });
+    res.end(widgetJs);
+  } else {
+    res.writeHead(200, {
+      "Content-Type": "application/javascript",
+      ...webchatCors
+    });
+    res.end('console.warn("[WhaleChat] Widget JS not built. Run: npx esbuild src/webchat/widget.ts --bundle --minify --outfile=dist/webchat/widget.js");');
+  }
+  return true;
+}
+//# sourceMappingURL=server-routes-webchat.js.map